Sophisticated Phishing Campaign Attempts to Bypass SEGs

Researchers at Group-IB warn of a global phishing campaign that impersonates trusted document-management and e-signature services (notably DocuSign and occasionally using domains like Adobe.com) to harvest employee credentials. The attackers increase success and evade Secure Email Gateways by delivering links from legitimate domains and dynamically customizing phishing pages with the target company’s domain, logos, and favicons to appear authentic.